Added cross domain access control headers to the API